We provide a pretty white glove service to our customers in that we run setup on every new IOS device, manually set some settings that our not manageable through an MDM, and decluttering the home screen of widgets and many native IOS apps.To be clear, I don’t want to remove or lock down the use of many native apps. I would like to remove all widgets, and remove the home screen SHORTCUTS to many native apps but leave the actual app itself available from the app library if needed.The goal is to deliver a device with a clean decluttered INITIAL layout device that has only the core native apps (such as phone, settings, messages, photos etc) and the required business apps on the main home screen page. After that, if a person wants to drag a shortcut to the calculator app (for example) out the home screen, they can do that from the app library.I realize that I can create a conf profile that HIDES apps, but I don’t want to do that because it removes access to that apps, not just the shortcut.

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

Hi folks,I’m doing an audit of our config profiles and would like to break our baseline configuration profile into multi profiles. Right now, we have a massive baseline profile. If I need to edit a specific feature or settings, the whole profile gets push out everywhere.I would like to create smaller profiles that are specific to subsets of settings so I have more granular control over updating settings and the distribution of those settings.For example I may have profiles like the following as opposed to one massive profile:Baseline- Network UsageBaseline- FunctionalityBaseline- Setup StepsBaseline- Hidden AppsI can certainly created those subset profiles now without any scope assigned. My question is whether people have suggestions on the best order of steps to accomplish this task without the world exploding :-)For example, if I replicate everything currently in effect within multiple profiles, and I scope those new profiles to my all devices group, then I remove the current massive

Hey Jamf Nation! Welcome to another edition of Things to Do for JNUC, 2026 Edition. This JNUC we’re heading to Kansas City, Missouri, so let’s make the most of it. Whether you’re travelling from near or far (I’m still coming from Canada!), here’s a curated list of activities to help you plan your trip. Locals - please share your insider tips! JNUC HighlightsJNUC Party: The Wednesday night bash is always a highlight of great music, food, and networking. Don’t miss it! Vendor Parties: Expect free drinks, tasty bites, and epic giveaways. Jamf Heroes Meetup: Details for 2026 aren’t out yet but keep an eye on Jamf Nation for updates. Official JNUC Info: https://www.jamf.com/jnuc/ SportsKansas City is a sports town! Here’s what might be happening during JNUC week (check official sites for updated schedules):Kansas City Chiefs (NFL): The 2026 schedule should be released in mid-May. Visit https://www.nfl.com or https://www.chiefs.com. Kansas City Royals (MLB): Playoffs could be in full swing i

I am having an issue creating a  PreStage enrollment in Jamf Pro, The 'New' PreStage button hangs immediately on click. I have verified the ADE token is new and UIE is enabled. I just see a spinning wheel when I click New to create a PreStage enrollment for Computers. The Devices/ios one works fine. I did try chrome, firefox, safari browser, same issue.   

Update 23 February 2026: Standard Cloud upgrades have been rescheduled for the weekend of 6–7 March 2026 (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.25; highlights include:Branding Self Service+ for macOS via Jamf ProYou can change the Self Service+ application name and icon using Jamf Pro and Self Service+ 2.15.0 or later if Self Service+ is set as the default end user application. Previously, modifying Self Service branding settings in Jamf Pro only altered these attributes in the Self Service classic application.Improvements for OIDC-Based Single Sign-On Through Jamf AccountThe Jamf Pro login page retains the last-used identity provider (IdP), eliminating the need to reenter an email address. This requires users to allow cookies from jamfcloud.com. Ending a session in any Jamf web app integrated with OIDC-based SSO through Jamf Account will end the same session in Jamf Pro. Likewise, ending a session in Jamf Pro will end

I’d wanted to understand for a while how Apple structures its own support approach and what really lies behind the Apple Certified Support Professional certification. So I decided to take the exam myself. In this post, I’ll share how I prepared, which learning resources helped me most, and what I’d recommend to anyone planning to do the same. The Apple Certified Support Professional (ACSP) certification validates comprehensive knowledge in supporting and administering Apple devices. It’s designed for IT professionals, help desk staff, and administrators who regularly work with macOS, iOS, or iPadOS and provide daily end-user support. “This course introduces you to the knowledge, skills, and tools used to support and troubleshoot Apple devices in a large organization as a level 1 or 2 help desk professional.”  Learning Resources and Preparation   Apple offers free official learning modules on the Apple Training platform. These cover all topics included in the exam, such as user manageme

You might know Sagar Rastogi (@rastogisagar123) from his helpful replies in Jamf Nation, or from some of his Tech Thoughts blogs (here, here and here). He’s a technical architect at TCS, and he was recently named a winner in the TCS Global AI Hackathon, the world’s largest AI hackathon with more than 280,000 participants across 58 countries. It’s a huge honor, so naturally we wanted to celebrate Sagar and share more info on his great achievements.  Standing Out in a Crowd of 280,000 The scale of the hackathon alone is impressive, but what stood out even more was how Sagar approached it. His winning submission was a completely self‑driven project: an end‑to‑end AI product roadmap designed to solve real‑time challenges across healthcare, finance, and energy. His ideas weren’t just creative, but they were grounded in scalability, ethics, compliance, and practical feasibility. However, according to Sagar, innovation isn’t a solo act. It’s the shared momentum of a community pushing boundari

Looking to disable the dot macOS added to let users know that an app may have access to their camera without disabling the camera itself. We user a fleet of Macs for high-end meetings and conferences, and need to disable this distraction during screen share moments. Can someone point me in the right direction for maybe running something in a policy like a script? 

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

Hello All Happy New year.For those using Paltform SSO with Microsoft Entra, as anyone come across this error which seems to happen when Outlook has been left open for a period of time. It wasnt an issue before testing SSO. I though it had something to do with this setting in SSO config profile, but changing the value has’nt made much difference. ThanksTom​​​​​​​

I've noticed since we upgraded to Jamf Connect 2.4.1 last week that when I restart my computer that I am getting 2 login screens. We are using FileVault, so the expected behavior is the standard Mac login screen. We have Jamf Connect setup so that at logout you get a custom Jamf Connect login screen. Instead, I get the standard Mac login screen, I enter my password, I am taken to another login screen (with my desktop background instead of the generic Big Sur background) and I can enter my password or use touch ID to login. Thoughts? Anyone else having this?

☀️ Hey All! Our Marketing team is putting together a short video for social media to recognize Apple's 50th Anniversary, and we'd love to include a few customers in the video. If you’d like to participate, take a look at this Vouch request link to get a better understanding of what’s needed:https://app.vouchfor.com/c/Of0SDkUYpd?senderId=3ZKGbIfEhK We can’t guarantee that all submissions will make it into the final video, but if yours is fun/unique in some way, you have a good shot. 🙂 Deadline to submit: Friday, Feb. 20 Thanks, as always, for being a part of the Jamf story!!!❤️ Jeni

I just got access to jamf pro with the partner program, how am i supposed to enroll my own mac to be able to test with it?

As the title says, I just got access to blueprints and eager to start learning this, but right away i notice im missing things.  Jamf chat box told me thisYou'll need the Cloud Services Connection (Read) privilege in addition to your existing Blueprint permissions. This privilege is required for app installation functionality within Blueprints. To resolve this, you can: • Contact your Jamf Pro administrator to add the Cloud Services Connection (Read) privilege to your user account • If you have a custom privilege set, ensure it includes both Blueprint permissions and Cloud Services Connection access Once these privileges are added, you should be able to access app installation features alongside the declarative configurations you're currently seeing.Now after checking everything and confirming with Chatgpt,  I am being told App installations in Blueprints are not Enabled at the Tenant Level.  Something about being a Backend feature flag.   i am unsure how to proceed with this. Any help

Hello Everyone, Not sure if anyone here could help. But over the last year we have been seeing a lot of devices that just stop syncing. I have been trying to find a solution and have had many tickets open with jamf. I can have the device on wifi, unlocked and just stilling at the home screen and it still times out when i resync the device. It seems most times that clearing the Activity log will allow it to resync for a time. I can’t seem to figure out what is causing this and its making us look at other MDMs because of this a few other issues. 

I’m trying to figure out how to configure the passcode to be 6 digits instead of 8 characters, including uppercase and lowercase letters and numbers. 

 From mid-November through the final weeks of the year, many IT teams shift into a different rhythm. Projects wrap up. User demand slows. Emergency tickets still happen, but the pace usually lightens. This quieter stretch creates one of the best opportunities to build new skills, strengthen existing ones, and earn certifications that keep you growing.  Technology does not slow down when the calendar does. Platforms update, security threats evolve, and new tools enter the stack faster than most teams can adopt them. Staying sharp takes intention. If you wait for the “perfect time” to learn something new, it rarely comes. But late Q4 offers a natural runway that is easy to miss if you are not looking for it.  Using this time for learning sends a clear signal to yourself and your team. It shows that continuous upskilling is not a checkbox, but a habit. Whether you manage devices with Jamf, work in security, support end users, or build infrastructure, the problems you solve tomorrow will n

 We’re a year into Apple shipping Apple Intelligence (though technically still in Beta) but Apple hasn’t shipped a clear matrix of which features are on-device vs. require Private Cloud Compute (PCC). If you haven’t read part 1, then click here and go back and read it. And then follow up and read part 2, by clicking here. But what if… all that information was hiding on your very Mac in a system diagnostics, your Mac quietly generates a Model Catalog inside sysdiagnose that lists feature availability, languages, and — critically — which resources are server-side! For those that do not know, you can run a system diagnostics and explore the zip file created to potentially find some interesting tidbits about your Mac.Open Terminal.app and typesudo sysdiagnose -f ~/*** Disclaimer, system diagnostics bundles can potentially contain sensitive information *** Follow the prompt and this will create a system diagnostics zip bundle eventually in your home directory. Double click the zip file crea

🎉 Happy New Year! 🥳 It is traditional to use the beginning of the year to make plans. Conferences and the associated travel require quite a bit of planning. I keep an overview of the larger conferences in the Mac and wider Apple management and security community on my website, but thought a bit of a more detailed overview might be useful.Whether you want to "just" attend or even hand in a proposal for a talk, here is a list of conferences this year with links to their websites. MacAD.UK: Brighton, UK, April 21–22This conference in Brighton on the British coast, south of London, has been bringing together Apple management professionals from the United Kingdom and all over Europe for several years. This year, they are moving to a new venue in Brighton. ACES Conference: Minneapolis, MN, USA, May 12–13ACES focuses more on the business side of providing IT services in the Apple space and as such, is quite interesting for partners and service providers. This year, they have a new track ded

As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions. Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:For more details, please see below the jump.As of Jamf Pro 11.18.0, there is not a Blueprints template available for creating blueprints which manage device restrictions so the blueprint will need to be configured manually. To do this, use the following procedure:1. Log into Jamf Pro.2. Select Blueprints3. Click the Create blueprint button.4. Give it a name when prompted and click the Create button. For this example, I’m usi

Earlier this week, our Community team brought members of Jamf Nation together for a special event — an hour of inspiration, celebration and gratitude. World-renowned keynote speaker, author and all-around good guy, Chris Schembra, led the conversation: Jamf Nation 2026: The Power of Human Connection.  As the largest online community of Apple admins in the world, Jamf Nation members understand the power of connection. They’ve been using it to move mountains in the Apple space for the better part of two decades. But as the environment around us changes, Chris challenged the group to consider mindset shifts that could lead to even better outcomes. He encouraged them to move both fast and slow, referencing the Emilia-Romagna mindset of “holding the tension of opposites to achieve world-class excellence.” He asked, Where in your life do you need to go slower? Where in your life do you need to go faster? How do you hold the tension between those two?  The chat lit up.  Thoughtful, deeply mea

It must be 8 or 9 years ago that I started supporting customers with ZuluDesk (now Jamf School). This was my first step into the device management world. Before that, I was a repair technician.  As my curiosity grew, I was lucky enough that my employer allowed me to do the Jamf 100 and 200 courses. Managing iOS devices is all good and well, but with Mac you need a little more tools. Things like setting a wallpaper sound easy, but they actually require a bit more work than I expected.   Welcome to the world of Mac Admins! I discovered that for everything I wanted to figure out how to do, there is usually someone with the same question, and maybe they’ve already found a solution for it. Coming in as a completely new Mac Admin, it might be a bit difficult to find your way. But knowing the right people, tools or places to ask for help are really valuable and make all the difference.   So I thought, why not try and create some sort of list with starting points for f

Enrolling in a Jamf Training Course is an exciting step in expanding your skills, but once your class is scheduled on the calendar, you might wonder: How should I prepare for training? What devices should I use? How should I set up my workspace? While Jamf will send you important setup instructions prior to your course beginning, here are additional preparation steps and strategies you can take to ensure you’re fully ready to succeed. 1. Review the Student Setup GuideOne week before your training begins, you will receive an email from Jamf Training with important details about your course. This email will look like the following:   This email will contain:Instructions to log into Jamf Account to view customer requirements and prerequisites A link to access the remote training session the following week A link to the Student Setup Guide A contact for your instructor. If you have questions, you can reach out to them. The Student Setup Guide is essential. It outlines:Device Requirements R

Originally posted in MacAdmin Musings Why I Try to Stop Working Before Everything Is Finished For a long time, I treated the end of my workday as a finish line.I’d keep going until the problem was solved, the task was complete, or I was too drained to continue. If something was still broken or unanswered, I felt pressure to push through it before logging off. Ending the day with loose ends felt like failure, like I wasn’t completing my tasks.Over time, I realized that approach was quietly working against me.Not because unfinished work is bad, but because how you leave work unfinished matters. The Hidden Cost of Draining the Tank When you work until you have nothing left, you don’t just end the day tired. You also make tomorrow harder.The next morning starts cold:You have to remember what you were thinking You have to reconstruct context You have to re-load mental state before you can make progressThat ramp-up cost is real, whether you’re writing small scripts or a large project. Moment